Move permissions setup from ArticleDAO to controller and workflow; cleanup some style issues